Lucene search
+L

78 matches found

BDU FSTEC
BDU FSTEC
•added 2025/12/23 12:00 a.m.•13 views

The vulnerability of the SAPCAR file compression and decompression utility, related to incorrect privilege assignment, allows a hacker to elevate their privileges.

The vulnerability of the SAPCAR file compression and decompression utility is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.9CVSS5.8AI score0.00149EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/23 12:00 a.m.•14 views

The vulnerability of the SAPCAR file compression and decompression utility lies in the improper limitation of the path name for the restricted access directory, allowing attackers to write arbitrary files.

The vulnerability of the SAPCAR file compression and decompression utility is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to write arbitrary files...

6.2CVSS5.9AI score0.00292EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/23 12:00 a.m.•14 views

The vulnerability of the SAPCAR file compression and decompression utility, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the SAPCAR file compression and decompression utility is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.9CVSS5.8AI score0.0013EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-7875

Malware in sbrugna...

6.5CVSS6.6AI score0.01254EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2016-6780

Malware in sbrugna...

5.5CVSS5.5AI score0.02982EPSS
SaveExploits5References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-20339

Malicious code in bioql PyPI...

5.8CVSS6.5AI score0.00292EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-20338

Malicious code in bioql PyPI...

4CVSS6.5AI score0.00149EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-20329

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.0013EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-30668

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01164EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-20328

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.00149EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/09/02 12:00 a.m.•12 views

The vulnerability of the SAPCAR file compression and decompression utility, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAPCAR file compression and decompression utility is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

4.3CVSS5.9AI score0.00149EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•13 views

CVE-2025-43001

SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with sign...

6.9CVSS7.2AI score0.00149EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•11 views

CVE-2025-42970

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS7AI score0.00292EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•14 views

CVE-2025-42992

SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on...

6.9CVSS7.2AI score0.0013EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•14 views

CVE-2025-42971

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file...

4CVSS7AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/08 1:15 a.m.•16 views

CVE-2025-43001

SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with sign...

6.9CVSS0.00149EPSS
SaveExploits0References2
NVD
NVD
•added 2025/07/08 1:15 a.m.•15 views

CVE-2025-42992

SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on...

6.9CVSS0.0013EPSS
SaveExploits0References2
NVD
NVD
•added 2025/07/08 1:15 a.m.•20 views

CVE-2025-42971

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file...

4CVSS0.00149EPSS
SaveExploits0References2
NVD
NVD
•added 2025/07/08 1:15 a.m.•16 views

CVE-2025-42970

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS0.00292EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/07/08 12:38 a.m.•26 views

CVE-2025-43001 Multiple Privilege Escalation Vulnerabilities in SAPCAR

SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with sign...

6.9CVSS0.00149EPSS
SaveExploits0References2
Rows per page
Query Builder